{
  "cves": [
    "CVE-2026-49975"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[2.0.29-4.2]\n- Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913\n\n[2.0.29-4.1]\n- Resolves: RHEL-182410 - mod_http2: HTTP/2: Remote Denial of Service via\n  compression bomb and Slowloris-style attack (CVE-2026-49975)\n\n[2.0.29-4]\n- Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory\n  Increase (CVE-2025-53020)",
  "id": "ELSA-2026-25225",
  "ovalId": "oval:com.oracle.elsa:def:202625225",
  "source": "oracle_linux",
  "title": "ELSA-2026-25225:  mod_http2 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-25225.html"
}